CVEvulnerability
CVE-2004-2085
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-02-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Multiple cross-site scripting (XSS) vulnerabilities in Brad Fears phpCodeCabinet 0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via multiple parameters, including (1) the sid parameter to comments.php, (2) the cid, cf, or rfd parameters to category.php, or the cid parameter to (3) input.php, (4) browse.php, (5) themes/facade/header.php, or (6) themes/phpcc/header.php.
Affected configurations
• brad fears phpcodecabinet 0.1
• brad fears phpcodecabinet 0.2
• brad fears phpcodecabinet 0.3
• brad fears phpcodecabinet 0.4
References
- http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/browse.php?r1=1.5&r2=1.6 Vendor Advisory
- http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/category.php?r1=1.4&r2=1.5 Vendor Advisory
- http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/comments.php?r1=1.1&r2=1.2 Vendor Advisory
- http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/input.php?r1=1.7&r2=1.8 Vendor Advisory
- http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/themes/facade/header.php?r1=1.4&r2=1.5 Vendor Advisory
- http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/themes/phpcc/header.php?r1=1.4&r2=1.5 Vendor Advisory
- http://secunia.com/advisories/10862 secunia.com
- http://securitytracker.com/id?1009012 securitytracker.com
- http://sourceforge.net/project/shownotes.php?release_id=214860 Vendor Advisory
- http://www.osvdb.org/16710 www.osvdb.org
- http://www.osvdb.org/16711 www.osvdb.org
- http://www.osvdb.org/3885 Vendor Advisory
- http://www.osvdb.org/3886 Patch, Vendor Advisory
- http://www.osvdb.org/3887 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/9601 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/9645 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15190 exchange.xforce.ibmcloud.com
- http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/browse.php?r1=1.5&r2=1.6 Vendor Advisory
- http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/category.php?r1=1.4&r2=1.5 Vendor Advisory
- http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/comments.php?r1=1.1&r2=1.2 Vendor Advisory
- http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/input.php?r1=1.7&r2=1.8 Vendor Advisory
- http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/themes/facade/header.php?r1=1.4&r2=1.5 Vendor Advisory
- http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/themes/phpcc/header.php?r1=1.4&r2=1.5 Vendor Advisory
- http://secunia.com/advisories/10862 secunia.com
- http://securitytracker.com/id?1009012 securitytracker.com
- http://sourceforge.net/project/shownotes.php?release_id=214860 Vendor Advisory
- http://www.osvdb.org/16710 www.osvdb.org
- http://www.osvdb.org/16711 www.osvdb.org
- http://www.osvdb.org/3885 Vendor Advisory
- http://www.osvdb.org/3886 Patch, Vendor Advisory
- http://www.osvdb.org/3887 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/9601 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/9645 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15190 exchange.xforce.ibmcloud.com